Ipsec-Tools; Rhsa-2009:1036: Important Security Update; Iputils; Rhba-2009:1090: Bug Fix Update - Red Hat ENTERPRISE LINUX 5.4 - TECHNICAL NOTES Manual

1.90. ipsec-tools

1.90.1. RHSA-2009:1036: Important security update

Important
This update has already been released (prior to the GA of this release) as the security
RHSA-2009:1036
errata
An updated ipsec-tools package that fixes multiple security issues is now available for Red Hat
Enterprise Linux 5.
This update has been rated as having important security impact by the Red Hat Security Response
Team.
The ipsec-tools package is used in conjunction with the IPsec functionality in the Linux kernel and
includes racoon, an IKEv1 keying daemon.
A denial of service flaw was found in the ipsec-tools racoon daemon. An unauthenticated, remote
attacker could trigger a NULL pointer dereference that could cause the racoon daemon to crash.
585
(CVE-2009-1574 )
Multiple memory leak flaws were found in the ipsec-tools racoon daemon. If a remote attacker is able
to make multiple connection attempts to the racoon daemon, it was possible to cause the racoon
daemon to consume all available memory.
Users of ipsec-tools should upgrade to this updated package, which contains backported patches to
correct these issues. Users must restart the racoon daemon for this update to take effect.

1.91. iputils

1.91.1. RHBA-2009:1090: bug fix update

Note
This update has already been released (prior to the GA of this release) as FASTRACK
RHBA-2009:1090
errata
An updated iputils package that fixes a bug is now available.
The iputils package contains basic utilities for monitoring a network, including ping.
This updated iputils package fixes the following bug:
• it is the rdisc utility which is called at boot time to populate the network routing tables with default
routes. This bug caused rdisc to fail during initialization when more than one IP address was
585
https://www.redhat.com/security/data/cve/CVE-2009-1574.html
586
https://www.redhat.com/security/data/cve/CVE-2009-1632.html
584
586
(CVE-2009-1632
587
)
ipsec-tools
95